Home • Hashes • Research • About • Swag Shop

System currently contains 114,396,365 malware samples.

Report for a sample recently added to the system:

0d15239ce3d73aa1515462a9d3ffb51cf953f9bc1045c275cc17fb81f9164560
VirusShare info last updated 2026-06-24 00:00:02 UTC
MD5	aad596699302b11b71732182e3d2b35e
SHA1	01ea6dcb3b89848f35afc533a7157de4bfba317f
SHA256	0d15239ce3d73aa1515462a9d3ffb51cf953f9bc1045c275cc17fb81f9164560
SSDeep	24576:5nndbmV9QToaqMsQGuL51azTt9fyIXhKjuj7loLRWlpe:nbmGy2Uzx9fyIXAjUhplpe
Authentihash	c6e243026349e0b39df39e3a43c2928b312e45f570cbdac813ca61908f92e9cb
Size	1,051,832 bytes
File Type	PE32 executable (GUI) Intel 80386, for MS Windows
Mime Type	application/x-dosexec
Extension	exe
TrID	Win64 Executable (generic) (55.2%) Win32 Executable (generic) (23.6%) Generic Win/DOS Executable (10.5%) DOS Executable Generic (10.5%)
Detections (18/70)	AhnLab-V3 PUP/Win32.Downloader.C1449029 CrowdStrike win/grayware_confidence_90% (D) Cylance Unsafe Cynet Malicious (score: 100) Elastic malicious (moderate confidence) Kingsoft malware.kb.a.982 Malwarebytes PUP.Optional.RegNow MaxSecure Trojan.Malware.300983.susgen McAfeeD ti!0D15239CE3D7 Microsoft Trojan:Win32/Wacatac.B!ml Rising Backdoor.ParallaxRat!8.125D6 (RDMK:cmRtazpovlKaockKDlx+dgnX5+R8) Skyhigh BehavesLike.Win32.Dropper.th Sophos Generic ML PUA (PUA) Symantec ML.Attribute.HighConfidence Trapmine malicious.moderate.ml.score TrellixENS GenericRXWW-BR!AAD596699302 VBA32 Adware.Presenoker Xcitium Application.Win32.Fourthrem.YU@6ftwpr VirusTotal Report submitted 2026-06-21 23:57:44 UTC
ExIF Data	CharacterSet Windows, Latin1 CodeSize 729088 CompanyName RegNow.com EntryPoint 0x90d3d FileDescription RegNow Download Manager FileFlags (none) FileFlagsMask 0x003f FileOS Win32 FileSize 1027 kB FileSubtype 0 FileType Win32 EXE FileTypeExtension exe FileVersion 1.0.0 FileVersionNumber 1.0.7.1 ImageFileCharacteristics No relocs, Executable, 32-bit ImageVersion 0 InitializedDataSize 307200 InternalName RegNow Download Manager LanguageCode English (U.S.) LegalCopyright © RegNow.com LinkerVersion 8 MIMEType application/octet-stream MachineType Intel 386 or later, and compatibles OSVersion 4 ObjectFileType Executable application OriginalFileName DldManager.exe PEType PE32 ProductName RegNow Download Manager ProductVersion 1.0.0 ProductVersionNumber 1.0.7.1 Subsystem Windows GUI SubsystemVersion 4 TimeStamp 2009:09:14 15:54:33+00:00 UninitializedDataSize 0